Who is responsible for your information?
Sara Eydmann is the data controller for personal information collected through this website and through Sara's professional work.
If you have a question about how your information is used, or would like to exercise one of your data protection rights, email info@saraeydmann.com.
What information may be collected?
The information collected depends on how you use the website and whether you go on to work with Sara.
Website and general enquiries
- Your name and email address.
- The organisation, club, team or brand you represent, where relevant.
- The reason you are getting in touch.
- Anything you choose to include in your message.
- Technical information such as device, browser and website usage data where analytics or cookies are enabled.
Therapy enquiries and clients
- Contact and appointment details.
- Information you provide about the support you are looking for.
- Relevant therapy records and session notes where appropriate.
- Information needed for professional, safeguarding, legal or administrative purposes.
Sport, speaking, social media and partnership enquiries
- Contact details.
- Information about your organisation, event, athlete, brand or project.
- Details needed to discuss, quote for or deliver the work.
How is your information used?
Sara may use personal information to:
- Respond to enquiries.
- Assess whether Sara's services are appropriate for what you are looking for.
- Arrange and provide counselling or other professional services.
- Manage appointments, payments and administration.
- Communicate with clients, organisations, event organisers, brands and collaborators.
- Meet professional, safeguarding, insurance, accounting or legal responsibilities.
- Maintain the security and operation of the website.
- Understand how the website is used, where analytics have been enabled with the appropriate cookie choices.
Personal information will not be sold to third parties.
Lawful bases for using personal information
Under UK data protection law, Sara must have a lawful basis for processing personal information. The basis used will depend on the reason the information is being processed.
For example, responding to an enquiry about services, arranging work, managing appointments or providing an agreed service.
Where necessary to operate the website and business effectively, communicate with relevant contacts, maintain records and protect the security of the website, provided those interests are not overridden by your rights.
Where information must be retained or used to meet legal, tax, safeguarding or other regulatory requirements.
Where consent is the appropriate basis, for example certain optional cookies, marketing communications or particular uses of information.
Health and other sensitive information
Information about physical or mental health is classed as special category personal data under UK data protection law.
If you make a therapy enquiry, you are encouraged to provide only the information needed for Sara to understand the type of support you are looking for. You do not need to include a detailed medical history in a website contact form.
Where health information is processed as part of counselling or related professional work, it is handled confidentially and only where an appropriate condition under UK data protection law applies, including where necessary for the provision of health-related support by a professional subject to duties of confidentiality, or where explicit consent is the appropriate condition.
Confidentiality may need to be limited in specific circumstances, for example where there is a serious safeguarding concern or a legal obligation to disclose information. Any professional confidentiality arrangements that apply to therapy will also be explained as part of the counselling agreement.
Who may information be shared with?
Sara only shares personal information where there is a valid reason to do so. Depending on how you use the website or services, this may include trusted service providers that help operate the website and business.
- Website hosting and WordPress service providers.
- Elementor and related website form or security tools.
- Email and communication providers.
- Zoom, where sessions or meetings take place online.
- Analytics or cookie providers where you have made the relevant cookie choice.
- Elfsight and Instagram/Meta where embedded social content is displayed.
- Professional advisers, insurers, accountants or legal advisers where necessary.
- Relevant health, safeguarding or other professionals where there is a lawful reason to share information and, where appropriate, with your knowledge or consent.
Service providers should only receive the information needed to perform their role and are expected to handle it securely.
International data transfers
Some technology providers used to operate the website, communicate, host video sessions or display social media content may process information outside the UK.
Where personal information is transferred internationally, Sara will rely on the relevant protections available under UK data protection law, such as UK adequacy regulations or approved contractual safeguards used by the relevant service provider.
How long is information kept?
Personal information is kept only for as long as it is reasonably needed for the purpose it was collected, and for any professional, legal, insurance, safeguarding or accounting requirements that apply.
Different types of information may therefore have different retention periods. When information is no longer required, it will be deleted, anonymised or securely disposed of where appropriate.
Cookies, analytics and embedded content
This website may use cookies and similar technologies needed for the website to function, as well as optional analytics or embedded services.
Non-essential cookies and similar tracking technologies should not be set unless the required consent has been given. You can use the website's cookie controls to accept, reject or change your preferences. The ICO states that non-essential cookies require a clear positive consent choice and should not be set before that consent is obtained.
Some pages may include third-party embedded content, such as an Instagram feed provided through Elfsight. These services may process technical or usage information according to their own privacy practices.
Your data protection rights
Depending on the circumstances and the lawful basis being used, you may have rights over your personal information.
To make a request, email info@saraeydmann.com. Not every right applies in every situation, and some information may need to be retained where there is a professional or legal reason to do so.
Questions or complaints
If you have a concern about how your personal information has been handled, please contact Sara first at info@saraeydmann.com.
You also have the right to raise a complaint with the Information Commissioner's Office, the UK's data protection regulator. Information about making a complaint is available at ico.org.uk.
Changes to this Privacy Policy
This policy may be updated if the website, services, technology providers or legal requirements change. The latest version will always be published on this page, with the date of the most recent update shown at the top.